21591 matches found
UBUNTU-CVE-2024-46712
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Disable coherent dumb buffers without 3d Coherent surfaces make only sense if the host renders to them using accelerated apis. Without 3d the entire content of dumb buffers stays in the guest making all of the extra...
PT-2024-6867 · D Link · D-Link Wireless Routers
Name of the Vulnerable Software and Affected Versions: D-Link wireless routers affected versions not specified Description: The issue is related to the telnet service in certain D-Link wireless routers, where user input is not properly validated, allowing unauthenticated remote attackers to use...
PT-2024-6871 · D Link · D-Link Wireless Routers
Name of the Vulnerable Software and Affected Versions: D-Link wireless routers affected versions not specified Description: The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow issue, which allows unauthenticated remote attackers to exploit this issu...
PT-2024-6868 · D Link · D-Link Covr-X1870 +2
Name of the Vulnerable Software and Affected Versions: D-Link wireless routers affected versions not specified D-Link DIR-X4860 D-Link DIR-X5460A1 D-Link COVR-X1870 Description: The web service of certain models of D-Link wireless routers contains a Stack-based Buffer Overflow vulnerability, whic...
D-Link DI-8300 msp_info_htm Function Command Injection Vulnerability
The D-Link DI-8300 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8300 version v16.07.26A1, which stems from the mspinfohtm function failing to properly filter construct command...
PT-2024-20858 · Unknown · 3Dsecure 2.0
Name of the Vulnerable Software and Affected Versions: 3DSecure 2.0 version 3DS Authorization Challenge Description: The issue is related to multiple reflected Cross-Site Scripting XSS vulnerabilities in the 3DS Authorization Challenge of 3DSecure 2.0. This occurs via a modified params parameter ...
D-Link DNS-320 /cgi-bin/discovery.cgi File Information Disclosure Vulnerability
The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability, which originates from the file /cgi-bin/discovery.cgi being...
D-Link DI-8300 upgrade_filter_asp Function Command Injection Vulnerability
The D-Link DI-8300 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. A command injection vulnerability exists in the D-Link DI-8300 version v16.07.26A1, which stems from the upgradefilterasp function failing to properly filter constructor...
D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
Impact Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Patches Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default. You can find out more information on how to turn it back...
GHSA-PW44-4H99-WQFF D-Tale vulnerable to Remote Code Execution through the Query input on Chart Builder
Impact Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Patches Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default. You can find out more information on how to turn it back...
CVE-2024-45595
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default...
CVE-2024-45595 D-Tale allows Remote Code Execution through the Query input on Chart Builder
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default...
CVE-2024-45595 D-Tale allows Remote Code Execution through the Query input on Chart Builder
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default...
CVE-2024-45595
D-Tale (Pandas visualizer) is vulnerable to remote code execution when hosted publicly via the Chart Builder’s Custom Filter input. The underlying issue is improper handling/validation of user-supplied input in the Custom Filter, enabling execution of arbitrary code on the server. The recommended...
CVE-2024-45595 D-Tale allows Remote Code Execution through the Query input on Chart Builder
D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.14.1 where the "Custom Filter" input is turned off by default...
Man D-Tale 跨站脚本漏洞
Man D-Tale is a pandas data structure visualization tool from Man. A cross-site scripting vulnerability exists in Man D-Tale versions prior to 3.14.1 that stems from vulnerability to remote code execution attacks and allows an attacker to run malicious code on the server...
PT-2024-31697
Name of the Vulnerable Software and Affected Versions: D-Tale versions prior to 3.14.1 Description: D-Tale is a visualizer for Pandas data structures. Users hosting D-Tale publicly can be vulnerable to remote code execution, allowing attackers to run malicious code on the server. The issue is...
D-Link DNS-320 Information Disclosure Vulnerability (CNVD-2025-18474)
The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability that stems from the fact that incorrect operation of the...
NewStart CGSL MAIN 6.02 : dbus Vulnerability (NS-SA-2024-0062)
The remote NewStart CGSL host, running version MAIN 6.02, has dbus packages installed that are affected by a vulnerability: - An assertion failure vulnerability was found in D-Bus. This issue occurs when a privileged monitoring connection dbus-monitor, busctl monitor, gdbus monitor, or similar is...